70 matches found
should-i-trust
should-i-trust Summary should-i-trust is a tool to evaluate OSINT signals for a domain. Requirements should-i-trust requires API keys from the following sources: Censys.io - Free for for first 250/quries/month VirusTotal - Free GrayHatWarFare - Free with limited results Use Case You're part of a...
user-security-stories
उपयोगकर्ता सुरक्षा कहानियाँ इस रिपॉजिटरी में उपयोगकर्ता सुरक्षा कहानियों और स्वीकृति मानदंडों का संग्रह है। उपयोगकर्ता सुरक्षा कहानियाँ सुरक्षा स्वीकृति मानदंड कृपया फोर्क करें और अतिरिक्त सुरक्षा कहानियाँ और स्वीकृति मानदंड योगदान करें जो आपको लगता है कि समुदाय को लाभान्वित करेंगे। इतिहास इस...
cornucopia
Progetto OWASP Cornucopia OWASP Cornucopia è un meccanismo sotto forma di gioco di carte per aiutare i team di sviluppo software a identificare i requisiti di sicurezza nei processi di sviluppo Agile, convenzionali e formali. È indipendente dal linguaggio, dalla piattaforma e dalla tecnologia...
AISVS
OWASP कृत्रिम बुद्धिमत्ता सुरक्षा सत्यापन मानक AISVS यह कार्य Creative Commons Attribution-ShareAlike 4.0 International License के अंतर्गत लाइसेंसित है। AISVS क्या है? कृत्रिम बुद्धिमत्ता सुरक्षा सत्यापन मानक AISVS AI-सक्षम प्रणालियों के लिए परीक्षण योग्य सुरक्षा आवश्यकताओं की एक सामुदायिक-संचालि...
ASVS
OWASP Application Security Verification Standard Este trabalho está licenciado sob uma Creative Commons Atribuição-CompartilhaIgual 4.0 Internacional. 🎉🎉🎉 Bem-vindo à Versão 5.0 do ASVS! 🎉🎉🎉 Lançada AO VIVO no palco do Global AppSec EU Barcelona 2025! Introdução O principal objetivo do Projeto...
SecurityRAT
OWASP Security RAT Requirement Automation Tool è uno strumento che ti aiuta a gestire i requisiti di sicurezza nei tuoi progetti di sviluppo agile. Il caso d'uso tipico è: specificare i parametri dell'artefatto software che stai sviluppando sulla base di queste informazioni, viene generato un...
UBUNTU-CVE-2026-73501
kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load in openapi3filter/validationhandler.go silently replaces a nil AuthenticationFunc with NoopAuthenticationFunc, which returns nil without checking credentials. This substitution causes every OpenAPI...
From Backlog Items to Security Guidance: Towards Continuous Security Compliance
Continuous software engineering in regulated domains requires engineering teams to address security throughout the development lifecycle. Yet making security requirements explicit in backlog items is still problematic. Engineers must instead infer security relevance of backlog items from brief,...
A Bayesian Network Approach for Enhancing Security-Focused Decision Support Systems
The adoption and integration of heterogeneous stacks in most of today's open-source based networks brings clear benefits like interoperability and availability of advanced features. Yet, on the other hand the increasing number of interconnecting components and moving parts requires maintaining an...
EUVD-2026-4394
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in pixelgrade Nova Blocks nova-blocks allows DOM-Based XSS.This issue affects Nova Blocks: from n/a through = 2.1.9...
EUVD-2026-4475
Langflow evalcustomcomponentcode Eval Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...
EUVD-2026-3689
In the Linux kernel, the following vulnerability has been resolved: net/sched: schqfq: Fix NULL deref when deactivating inactive aggregate in qfqreset qfqclass-leafqdisc-q.qlen 0 does not imply that the class itself is active. Two qfqclass objects may point to the same leafqdisc. This happens whe...
EUVD-2026-2063
Dreamweaver Desktop versions 21.6 and earlier are affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could leverage this vulnerability to bypass security measures and execute unauthorized code...
EUVD-2026-1237
The iPaymu Payment Gateway for WooCommerce plugin for WordPress is vulnerable to Missing Authentication in all versions up to, and including, 2.0.2 via the 'checkipaymuresponse' function. This is due to the plugin not validating webhook request authenticity through signature verification or origi...
EUVD-2026-0077
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0137
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0233
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...
EUVD-2026-0397
This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...